Skip to content
skopnix
Every edition · newest first

The archive.

1,115 dispatchespage 19 / 19№ 35 – 1

  1. Sat 25 Jul 2026

    8 dispatches
    RT by @TheHackersNews: ALERT - A malicious JSON request can become unauthenticated RCE on affected Spring Boot fat-JAR apps running Fastjson 1.x. Fastjson 1.x has no patched release, and ThreatBook and Imperva report attacks targeting the flaw. Learn how it works and who’s exposed: https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.htmlEXPL
  2. Insurance phishing kits are now hijacking accounts while victims are still logging in. InsureOTP relays stolen credentials and one-time passwords to legitimate insurance portals in real time, letting attackers complete authentication within the same browsing session. Read how the operation works: https://thehackernews.com/2026/07/ctm360-research-reveals-how-insurance.htmlMALW
  3. Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as GitVULN
  4. Cl0p-linked attackers are actively exploiting a critical unauthenticated RCE in internet-exposed PTC Windchill and FlexPLM systems. They chain two flaws, drop hex-named JSP webshells, and steal engineering data for double extortion. Manufacturing, automotive, aerospace, and retail firms are the main targets. Full details → https://thehackernews.com/2026/07/cl0p-affiliates-target-internet-exposed.htmlEXPL
  5. DevMan RaaS now runs a full affiliate portal. Experts (tracking it as Funky Mantis) say the platform handles payload builds, victim records, chat, teams, support, and payouts in one place. Affiliates get structured workflows, deadlines, and an 80/20 cut. 184 victims claimed so far. Read: https://thehackernews.com/2026/07/devman-raas-portal-centralizes-payload.htmlRANS
  6. RT by @TheHackersNews: A public GitLab RCE PoC lets an authenticated user run commands as the git user on an unpatched 18.11.3 server. No admin rights, CI runner access, victim interaction, or access to another user’s project. See how the notebook-diff chain works: https://thehackernews.com/2026/07/researcher-publishes-gitlab-rce-poc.htmlEXPL
  7. Today Mandiant announced that they're a bunch of soft blooded cowards and need to make names more catchy, or something. They're abandoning their APT naming convention (i.e. APT29) and replacing it with codenames, like SANDWORM RELIC Weak bro https://cloud.google.com/blog/topics/threat-intelligence/updated-cyber-threat-actor-naming-system/RSCH
  8. UPDATE - Public PoC exploit released for CVE-2026-42533, chaining an #nginx memory leak and heap overflow to bypass ASLR and achieve unauthenticated command execution. Read: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.htmlEXPL

  9. Fri 24 Jul 2026

    27 dispatches
    Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accountsEXPL
  10. US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra ServersEXPL
  11. Despite multiple takedowns, botnets continue to growMALW
  12. RT by @cyb3rops: We successfully achieved an RCE on GitLab in its default configuration. Historically, most GitLab RCEs have lived in the web or application-logic layers. This time, guided by the @depthfirstlabs spirit, we went deeper: into the low-level gem dependency chain beneath GitLab. The result? By sending crafted JSON data, we could exploit memory-corruption vulnerabilities buried deep in that chain and take control of the GitLab application server. @depthfirstlabs brings together some of the smartest people, and is building the best security AI agent. Follow our work, and come join us! Read more about this in the comment...EXPL
  13. Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can DoRSCH
  14. Data Breach Confirmed After Australian Energy Giant Origin Is HackedBRCH
  15. Golden Chickens Resurfaces With Four New Malware Families and Modular ImplantsMALW
  16. OpenAI’s agent escaped its sandbox during a security testRSCH
  17. In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel FlawsMISC
  18. New Dolphin X malware uses AI to rank high-value targetsMALW
  19. NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private ChatsVULN
  20. Australian energy provider Origin says data breach exposes client dataBRCH
  21. Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers SayVULN
  22. Fake Claude app promoted by Bing ads pushes SectopRAT malwareMALW
  23. [KEV] CVE-2026-16232: Check Point SmartConsole Improper Authentication VulnerabilityKEV
  24. BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware DeliveryMALW
  25. Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance MinistryAPT
  26. Vatican's Official Prayer App Leaks 700K+ Global Users' PIIBRCH
  27. Hermes AI agent used to automate attack on Thai Finance MinistryEXPL
  28. Microsoft blames massive Microsoft 365 outage on maintenance bugBRCH
  29. ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing LinkVULN
  30. Default Azure Automation Setting Enables Cross-Tenant Identity TakeoverVULN
  31. Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain ControllerVULN
  32. Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's ServersVULN
  33. Clop ransomware targets Windchill, FlexPLM in data theft attacksEXPL
  34. CVE-2026-12877: The Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0 doesVULN
  35. Certighost and the Privilege Hiding in Your Certificate AuthorityVULN